$ rpki-client -vvf rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft File: fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft (raw, json) Hash identifier: nJGZ5WlAjNt3uY1pHOH7qv+7kcMTLQ7lLvsCMvl5agc= Subject key identifier: 09:CA:68:AA:25:EE:4F:D0:B9:4D:F1:58:B3:F0:25:7C:11:D0:3C:83 Authority key identifier: 7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F Certificate issuer: /CN=A9170AF9/serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Certificate serial: 0641 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft Manifest number: 063C Signing time: Thu 18 Sep 2025 23:00:16 +0000 Manifest this update: Thu 18 Sep 2025 23:00:16 +0000 Manifest next update: Thu 25 Sep 2025 23:00:16 +0000 Files and hashes: 1: fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl (hash: VkIvvNNeNqHQ7023lIEVAUu3wpFjlHgjqk1B2qec2xY=) 2: 98212A1EA7F011EB816C331FC4F9AE02.roa (hash: OhXdNxeZYZKsEh/kQY88PZgh8U46VN9OPBnD0qrSgNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 23:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1601 (0x641) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170AF9, serialNumber=7EE3B88FB1AF0D92DBD2166125FB09CB24F1083F Validity Not Before: Sep 18 23:00:16 2025 GMT Not After : Sep 25 23:00:16 2025 GMT Subject: CN=68cc8f00-528b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:cb:21:39:04:98:cd:74:b4:18:36:a0:56: c4:49:17:c3:8d:fd:61:32:1b:f6:78:e8:78:c3:e5: ec:19:69:36:d8:12:b7:42:24:ff:77:f9:97:9f:14: 30:7e:a0:38:9c:92:5c:14:34:43:7b:0d:db:01:03: c9:51:79:fa:66:d0:7a:f3:85:93:d5:73:5d:fd:d2: 66:70:c1:cb:ea:bb:3e:3d:8d:7e:da:2f:9a:6b:1a: 1e:da:a3:08:3a:48:98:ce:11:2a:c6:fa:32:fb:b7: c6:0a:0e:3d:37:54:39:35:31:34:aa:6e:fd:72:8c: 3c:a6:b6:02:84:c1:26:78:7f:75:81:b0:e4:92:61: b7:84:60:fe:12:4b:b8:79:cf:87:61:75:97:a2:0f: 8c:2e:9e:ae:8e:f0:7b:91:93:3b:14:35:de:5b:05: b2:17:a5:bb:33:fa:16:3f:fe:a4:9a:2c:72:39:4b: 3b:88:54:59:a5:99:91:7a:d8:a9:5e:d0:35:d7:d7: df:fd:e9:25:3a:5b:b5:38:2f:ad:65:9b:68:95:53: 53:28:ba:22:31:e4:db:31:9b:3c:5f:5c:66:76:7c: b9:ee:44:cb:de:9c:58:66:12:b2:29:6a:90:b7:c3: 4d:cd:f8:cb:a6:ee:8c:4a:2e:c8:ba:a4:ff:bb:a9: 02:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CA:68:AA:25:EE:4F:D0:B9:4D:F1:58:B3:F0:25:7C:11:D0:3C:83 X509v3 Authority Key Identifier: keyid:7E:E3:B8:8F:B1:AF:0D:92:DB:D2:16:61:25:FB:09:CB:24:F1:08:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuO4j7GvDZLb0hZhJfsJyyTxCD8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170AF9/29CDCD8EA7EF11EBB12DA41EC4F9AE02/fuO4j7GvDZLb0hZhJfsJyyTxCD8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:2e:73:65:97:b2:31:03:51:45:58:1e:8c:39:d1:f1:26:b5: d2:32:0e:ef:eb:3b:73:14:7b:98:e6:18:80:37:98:a8:2f:cb: 54:e4:cd:a0:8a:70:dc:5c:89:3e:ac:c4:3c:48:90:6f:2f:58: 41:36:2b:6e:a2:a7:a6:e8:07:5a:b6:3c:b4:73:74:c7:df:4b: dc:cf:59:7b:92:f2:7c:23:f9:18:c4:9b:66:d4:cd:d5:18:7e: 10:bb:bf:cf:b7:ef:05:09:2e:53:0a:b1:4e:54:bb:7b:c8:02: 5b:8c:b8:60:98:26:c5:4a:9e:d2:c0:03:a2:49:7e:92:48:5a: a9:c2:27:f0:85:12:cb:63:4d:e8:e8:95:fd:73:e0:00:21:16: 76:c1:e8:02:7f:81:8d:c9:57:bd:79:22:7c:11:c6:65:73:07: 1b:cd:78:a6:86:6f:f5:11:c2:3f:4b:53:c7:3d:98:e2:57:2a: 3f:0d:89:95:39:50:05:2f:38:f9:6b:9a:64:34:68:a6:dc:96: fb:a6:37:f8:d7:98:09:f0:ed:c0:43:45:67:2b:4b:18:07:3a: 45:d2:2e:0d:4a:2b:8a:2a:00:e0:72:2b:07:ea:11:e8:86:34: 98:7a:6d:75:f4:77:71:a8:46:cf:06:d7:f7:5b:4c:67:97:a7: b2:1f:e1:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBBRjkxMTAvBgNVBAUTKDdFRTNCODhGQjFBRjBEOTJEQkQyMTY2MTI1RkIwOUNC MjRGMTA4M0YwHhcNMjUwOTE4MjMwMDE2WhcNMjUwOTI1MjMwMDE2WjAYMRYwFAYD VQQDEw02OGNjOGYwMC01MjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9XLITkEmM10tBg2oFbESRfDjf1hMhv2eOh4w+XsGWk22BK3QiT/d/mXnxQw fqA4nJJcFDRDew3bAQPJUXn6ZtB684WT1XNd/dJmcMHL6rs+PY1+2i+aaxoe2qMI OkiYzhEqxvoy+7fGCg49N1Q5NTE0qm79cow8prYChMEmeH91gbDkkmG3hGD+Eku4 ec+HYXWXog+MLp6ujvB7kZM7FDXeWwWyF6W7M/oWP/6kmixyOUs7iFRZpZmRetip XtA119ff/eklOlu1OC+tZZtolVNTKLoiMeTbMZs8X1xmdny57kTL3pxYZhKyKWqQ t8NNzfjLpu6MSi7IuqT/u6kC7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnKaKol 7k/QuU3xWLPwJXwR0DyDMB8GA1UdIwQYMBaAFH7juI+xrw2S29IWYSX7Ccsk8Qg/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEFGOS8yOUNEQ0Q4RUE3 RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRaTGIwaFpoSmZzSnl5VHhD RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1TzRqN0d2RFpMYjBoWmhKZnNKeXlUeENEOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEFGOS8yOUNEQ0Q4RUE3RUYxMUVCQjEyREE0MUVDNEY5QUUwMi9mdU80ajdHdkRa TGIwaFpoSmZzSnl5VHhDRDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFLnNll7IxA1FFWB6MOdHxJrXSMg7v6ztzFHuY5hiAN5ioL8tU5M2g inDcXIk+rMQ8SJBvL1hBNituoqem6Adatjy0c3TH30vcz1l7kvJ8I/kYxJtm1M3V GH4Qu7/Pt+8FCS5TCrFOVLt7yAJbjLhgmCbFSp7SwAOiSX6SSFqpwifwhRLLY03o 6JX9c+AAIRZ2wegCf4GNyVe9eSJ8EcZlcwcbzXimhm/1EcI/S1PHPZjiVyo/DYmV OVAFLzj5a5pkNGim3Jb7pjf415gJ8O3AQ0VnK0sYBzpF0i4NSiuKKgDgcisH6hHo hjSYem119HdxqEbPBtf3W0xnl6eyH+EH -----END CERTIFICATE-----Generated at Fri Sep 19 06:49:32 2025 by rpki-client